Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
File:                     fOaNr18IlFbA4dAiRTk1Maxbj8s.mft (raw, json)
Hash identifier:          kfYarbswesr1XssVRoJUKW0mxl2u92h6Oxc4iG7seMg=
Subject key identifier:   4F:05:C7:0E:98:A9:F0:45:EB:2F:02:53:48:F1:CB:F2:C7:F0:9C:EC
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Certificate issuer:       /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial:       0196729D9476420E3923BEA5D9379C9E8F67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
Manifest number:          155B
Signing time:             Sat 26 Apr 2025 15:00:51 +0000
Manifest this update:     Sat 26 Apr 2025 15:00:51 +0000
Manifest next update:     Sun 27 Apr 2025 15:00:51 +0000
Files and hashes:         1: Gy2CW0Td6J-rxJGzgVfuTvJN2Gc.roa (hash: /b5aRnHH3wnxArlR5kFKg9d+odQfqWviv5wIlL2Kwi4=)
                          2: LuPOINyFzX9xpTNNLpVMhkc3RGs.roa (hash: CVfqSYlx9earVowtUFnY2vr9Ypav6ng0WSshJUDgEG0=)
                          3: W0y-zOIi1-67OubMNwYseTI2YtY.roa (hash: o3q76eBrYuH9u8MB8bIslqFqm+BZyQwFbiFNU/6C+2A=)
                          4: _98jj7rw3GzhqfBubRrswa8FaIM.roa (hash: 33HpVVlfY3jl30lKiRH+eSoeIY19MzDqa9h48Wn+xoY=)
                          5: fOaNr18IlFbA4dAiRTk1Maxbj8s.crl (hash: oxjNfHL4AYDvzuRswktGmT7oyw0zUPAsZeM2SJIMxxM=)
                          6: k0BbLfW1pH9JeekCNksDJuhLIU8.roa (hash: I7bsd1t0LSwpkWSpjQNC0fheclbb8PLVx1rVQYbgTzo=)
                          7: nh1DAdGlkCnqMoRCOw5nSf1eUrE.roa (hash: 6CL3sDa/YSgMH6T3lPf7wvZWcq37OdDdy32xWrUSt1w=)
                          8: zavgzNemz0PuzWJnrL1r_g_mOeM.roa (hash: GhTFQ6FabhR00Vo0TF/PdK9RjLjp+971izL/zbfm494=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 15:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:9d:94:76:42:0e:39:23:be:a5:d9:37:9c:9e:8f:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
        Validity
            Not Before: Apr 26 15:00:51 2025 GMT
            Not After : Apr 27 15:00:51 2025 GMT
        Subject: CN=4f05c70e98a9f045eb2f025348f1cbf2c7f09cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:95:f0:0a:17:69:59:8c:ac:f2:d5:aa:13:dc:
                    00:1c:2c:ed:3e:78:49:af:e4:cd:1f:cb:78:12:98:
                    88:38:69:0c:8c:07:36:f3:ec:eb:bc:a2:17:a8:fd:
                    70:db:0c:d9:bc:cc:2a:ea:41:a7:9b:fc:48:ad:27:
                    85:ed:e8:97:b4:e0:c5:50:8d:e4:a7:fa:b3:fd:d2:
                    e1:6a:41:f4:1e:78:08:16:36:7a:58:8b:3b:c7:71:
                    2f:d7:8c:21:14:c0:58:a6:e8:79:05:cc:d0:b7:41:
                    cc:0b:34:4f:bd:9f:0d:a0:5e:dd:cd:a9:9c:a4:f2:
                    34:9f:48:a0:c5:a6:45:9c:05:28:4e:62:97:00:52:
                    5a:3a:d2:ae:17:a9:eb:ad:33:c9:b4:72:ce:ef:fe:
                    63:77:98:cf:4e:af:36:be:51:93:5a:82:f3:3f:ff:
                    c8:4d:f6:af:ff:60:a4:be:a9:8c:03:45:7c:cb:7a:
                    c1:d2:95:70:04:ae:06:ac:32:40:f6:fa:c0:87:b6:
                    90:29:e8:28:f6:54:48:75:e5:49:86:4e:75:05:3b:
                    ed:e1:90:92:68:77:08:25:e0:99:98:2c:4d:62:b2:
                    09:bc:7f:5a:df:81:44:bb:89:af:af:58:c0:29:8d:
                    9d:37:08:cc:48:f7:85:1a:6e:e8:16:a0:c3:36:3b:
                    c8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:05:C7:0E:98:A9:F0:45:EB:2F:02:53:48:F1:CB:F2:C7:F0:9C:EC
            X509v3 Authority Key Identifier:
                keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:cc:8d:0b:d7:ae:7c:18:3e:38:7f:8a:b5:3f:31:96:02:77:
         ac:46:8e:f8:b5:a0:2d:a9:34:78:e8:6e:ac:f2:a9:8f:62:a3:
         bf:ee:a3:1d:25:30:e1:45:38:da:7a:7c:9b:08:7c:67:21:c3:
         6d:0e:19:3e:d3:52:d9:a4:83:ec:12:e3:55:80:57:0b:b9:f1:
         e7:7c:42:a7:41:1c:fc:f8:13:03:49:e7:ea:5e:2e:76:b3:3d:
         63:c8:cc:ef:ec:73:c5:7c:42:a8:a1:ec:61:a4:8e:26:03:31:
         9b:9e:2d:00:c8:f9:ca:84:e0:9a:e0:35:09:90:28:ab:e9:7a:
         6f:11:a8:bd:17:9e:4b:6b:f5:0d:d8:cd:0e:48:ce:e5:f5:60:
         90:00:36:e2:6a:72:0f:87:0c:45:79:5d:b5:6c:49:cb:42:82:
         21:b9:c5:d4:d4:4a:7d:0c:e2:b8:07:69:7b:ac:e0:49:9a:a4:
         6c:6a:53:6b:c1:7b:c1:8f:56:7e:97:95:33:04:cc:5c:ff:38:
         f0:2a:70:8a:21:bc:0e:05:cf:e6:81:78:c4:8c:35:7f:10:7d:
         5e:d3:85:d2:a4:60:1a:da:24:6f:ea:65:71:fd:ef:c7:c2:f2:
         2c:6e:10:e7:6f:08:5e:78:8f:e8:7b:f6:ff:5e:3a:ff:4f:12:
         84:85:b5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:07:19 2025 by rpki-client